CVE-2009-1289

private/login.ssi in the Advanced Management Module AMM on the IBM BladeCenter, including the BladeCenter H with BPET36H 54, allows remote attackers to discover the access roles and scopes of arbitrary user accounts via a modified WEBINDEX parameter...

CVE-2009-1290

Multiple cross-site request forgery CSRF vulnerabilities in the web administration interface in the Advanced Management Module AMM on the IBM BladeCenter, including the BladeCenter H with BPET36H 54, allow remote attackers to hijack the authentication of administrators, as demonstrated by a...

CVE-2009-1288

Multiple cross-site scripting XSS vulnerabilities in the Advanced Management Module AMM on the IBM BladeCenter, including the BladeCenter H with BPET36H 54, allow remote attackers to inject arbitrary web script or HTML via 1 the username in a login action or 2 the PATH parameter to...

CVE-2009-1289

CVE-2009-1289 affects the IBM BladeCenter Advanced Management Module (AMM), including BladeCenter H with BPET36H 54. The issue allows remote attackers to discover the access roles and scopes of arbitrary user accounts by sending a modified WEBINDEX parameter to private/login.ssi. Root cause: mani...

CVE-2009-1290

The CVE-2009-1290 entry documents CSRF vulnerabilities in the IBM BladeCenter AMM web administration interface (including BladeCenter H with BPET36H 54). The underlying issue is cross-site request forgery that can enable remote attackers to hijack administrator authentication, demonstrated by a p...

CVE-2009-1288

The CVE-2009-1288 entry describes multiple cross-site scripting (XSS) vulnerabilities in IBM BladeCenter’s Advanced Management Module (AMM), including the BladeCenter H with BPET36H 54. The issues allow remote attackers to inject arbitrary web script or HTML via the username field during login or...

IBM BladeCenter高级管理模块跨站脚本和跨站请求伪造漏洞

BUGTRAQ ID: 34447 IBM BladeCenter是IBM的系列高性能刀片服务器。 IBM BladeCenter所使用的高级管理模块（AMM）的Web管理接口没有正确地过滤用户所提交的输入和请求。如果用户使用恶意的凭据试图登录的话，AMM会在事件日志页面记录用户所提交的凭据，之后管理员查看事件日志时就会执行所注入的内容。例如，攻击者可以使用以下用户名登录导致注入 JavaScript： /scriptscript src="//l7.fi"/scriptscript...

IBM BladeCenter Advanced Management Module multiple security vulnerabilities

Crossite scripting, information leak...

IBM BladeCenter Advanced Management Module Multiple vulnerabilities

Louhi Networks Information Security Research Security Advisory Advisory: IBM BladeCenter Advanced Management Module Multiple vulnerabilities XSS type 2 & 1, CSRF, Information Disclosure Release Date: 2009-04-09 Last Modified: 2009-04-09 Authors: Henri Lindberg [email protected], CISA Device...

IBM Bladecenter Advanced Management Module 1.42 - Cross-Site Request Forgery

IBM Bladecenter Advanced Management Module 1.42 - Cross-Site Request Forgery source: https://www.securityfocus.com/bid/34447/info IBM BladeCenter Advanced Management Module is prone to the following remote vulnerabilities: - An HTML-injection vulnerability - A cross-site scripting vulnerability -...

IBM Bladecenter Advanced Management Module 1.42 - Login Username Cross-Site Scripting

IBM Bladecenter Advanced Management Module 1.42 - Login Username Cross-Site Scripting source: https://www.securityfocus.com/bid/34447/info IBM BladeCenter Advanced Management Module is prone to the following remote vulnerabilities: - An HTML-injection vulnerability - A cross-site scripting...

IBM Bladecenter Advanced Management Module 1.42 - privatefile_Management.ssi?PATH Cross-Site Scripting

IBM Bladecenter Advanced Management Module 1.42 - privatefileManagement.ssi?PATH Cross-Site Scripting source: https://www.securityfocus.com/bid/34447/info IBM BladeCenter Advanced Management Module is prone to the following remote vulnerabilities: - An HTML-injection vulnerability - A cross-site...

IBM BladeCenter Advanced Management XSS/XSRF

Louhi Networks Information Security Research Security Advisory Advisory: IBM BladeCenter Advanced Management Module Multiple vulnerabilities XSS type 2 & 1, CSRF, Information Disclosure Release Date: 2009-04-09 Last Modified: 2009-04-09 Authors: Henri Lindberg [email protected], CISA Device...

IBM Bladecenter Advanced Management Module 1.42 - Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/34447/info IBM BladeCenter Advanced Management Module is prone to the following remote vulnerabilities: - An HTML-injection vulnerability - A cross-site scripting vulnerability - An information-disclosure vulnerability - Multiple cross-site request-forger...

IBM Bladecenter Advanced Management Module 1.42 - '/private/file_Management.ssi?PATH' Cross-Site Scripting

source: https://www.securityfocus.com/bid/34447/info IBM BladeCenter Advanced Management Module is prone to the following remote vulnerabilities: - An HTML-injection vulnerability - A cross-site scripting vulnerability - An information-disclosure vulnerability - Multiple cross-site request-forger...

IBM Bladecenter Advanced Management Module 1.42 - Login 'Username' Cross-Site Scripting

source: https://www.securityfocus.com/bid/34447/info IBM BladeCenter Advanced Management Module is prone to the following remote vulnerabilities: - An HTML-injection vulnerability - A cross-site scripting vulnerability - An information-disclosure vulnerability - Multiple cross-site request-forger...

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

Updated kernel-rt packages that fix several security issues and several bugs are now available for Red Hat Enterprise MRG 1.1. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel-rt packages contain the Linux kernel, the core of any Lin...